58 matches found
us.cnn.com Cross Site Scripting vulnerability OBB-3072461
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Mudge Files Whistleblower Complaint against Twitter
Peiter Zatko, aka Mudge, has filed a whistleblower complaint with the SEC against Twitter, claiming that they violated an eleven-year-old FTC settlement by having lousy security. And he should know; he was Twitters chief security officer until he was fired in January. The Washington Post has the...
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...
Detecting Evasive Malware on IoT Devices Using Electromagnetic Emanations
Cybersecurity researchers have proposed a novel approach that harnesses electromagnetic field emanations from the Internet of Things IoT devices as a side-channel to glean precise knowledge about the different kinds of malware targeting the embedded systems, even in scenarios where obfuscation...
campingcnn.cluster021.hosting.ovh.net Cross Site Scripting vulnerability OBB-1471327
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
prv.stage.cnn.co.jp Cross Site Scripting vulnerability OBB-1346673
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
How Feds Tracked Down Mail Bomb Suspect Cesar Sayoc
At a press conference Friday, officials detailed how they identified and found Cesar Sayoc, who has been arrested in connection with a series of mail bombs targeting prominent liberals and CNN...
How Mail Bombs Get Intercepted—And What Happens Next
Devices that might be explosives targeting Barack Obama, Hillary Clinton, CNN, and more all are caught before reaching their final destinations. Here's how...
politicalticker.blogs.cnn.com Improper Access Control vulnerability
Open Bug Bounty ID: OBB-627521 Description| Value ---|--- Affected Website:| politicalticker.blogs.cnn.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6...
ac360.blogs.cnn.com Improper Access Control vulnerability
Open Bug Bounty ID: OBB-627191 Description| Value ---|--- Affected Website:| ac360.blogs.cnn.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...
weather.cnn.com XSS vulnerability
Vulnerable URL: http://weather.cnn.com/weather/maps.jsp?mapview=radar=x%27%3E%3CsvG%20onLoad=alert%28/openbugbounty/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 31.05.2017 Latest check for patch:| 31.05.2017 15:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
edition.cnn.com XSS vulnerability
Vulnerable URL: http://edition.cnn.com/exchange/interactive/poll/2007/01/ReadersPoll.swf?CNNconfigUrl=http://nsa.is.spying-on.us/cnn.xml Details: Description| Value ---|--- Patched:| Yes, at 08.06.2016 Latest check for patch:| 08.06.2016 15:41 GMT Vulnerability type:| XSS Vulnerability status:|...
CNN Breaking US & World News - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application CNN Breaking US & World News published at the 'play' market has multiple vulnerabilities...
CNN Türk - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application CNN Türk published at the 'play' market has multiple vulnerabilities...
collection.cnn.com XSS vulnerability
Vulnerable URL: http://collection.cnn.com/content/registerUser.do Details: Description| Value ---|--- Patched:| Yes, at 22.06.2016 Latest check for patch:| 22.06.2016 20:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank|...
collection.cnn.com XSS vulnerability
Vulnerable URL: http://collection.cnn.com/content/searchResults.do?search.type=intermediate&search.withinKeywords;=&search.withinResults;=&search.keywords;=%22%3E%3Csvg%2Fonload%3Dprompt%28/xssposed/%29%3E= Details: Description| Value ---|--- Patched:| Yes, at 22.06.2016 Latest check for patch:|...
collection.cnn.com XSS vulnerability
Vulnerable URL: http://collection.cnn.com/content/logon.do Details: Description| Value ---|--- Patched:| Yes, at 22.06.2016 Latest check for patch:| 22.06.2016 20:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP...
searchapp.cnn.com XSS vulnerability
Vulnerable URL: http://searchapp.cnn.com/weboffers/weboffers.jsp?itype=cnn=cnn=zombie=%3C/script%3E%3Cscript%3Ealert%28/xssposed/%29%3C/script%3E=csi3 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:56 GMT Vulnerability type:| XSS...
ads.cnn.com Open Redirect vulnerability
Open Bug Bounty ID: OBB-53152 Description| Value ---|--- Affected Website:| ads.cnn.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable...
CNN Cross Site Scripting / Open Redirect
CNN Travel.cnn.com XSS and Ads.cnn.com Open Redirect Security Vulnerability Domain: http://cnn.com "CNN is sometimes referred to as CNN/U.S. to distinguish the American channel from its international sister network, CNN International. As of August 2010, CNN is available in over 100 million U.S...